The short version
- Your kubeconfig, credentials and everything in your clusters stay on your computer. Steerglass talks to your clusters directly, never through us.
- You can use Steerglass without an account (up to 3 clusters). If you create one, we keep your email address, the list of computers you signed in on — that’s what makes the license work — and the support requests you send us.
- The website uses cookieless, anonymous analytics (Umami, on our own server). No ads, no trackers, nothing sold or shared for marketing.
- You can delete your account yourself from your account, and ask for a copy of your data at [email protected].
Who we are
Steerglass (the desktop app and steerglass.com) is made by Davide Bettio, Italy, who is the data controller for the processing described here. For anything about your data, write to [email protected].
What we collect, and why
Your account
Steerglass works without an account for up to 3 clusters. An account unlocks every cluster: you sign in with your email address, there are no passwords. We store:
- your email address, when the account was created and when you last signed in;
- one-time sign-in links: we keep only a hash, and they expire after 20 minutes;
- website sessions: a session cookie (see Cookies), stored on our side as a hash, valid for 30 days.
We use your email to sign you in and to write to you about your account and the service (for example, important changes or the end of the beta). We don’t send newsletters or marketing; if we ever offer one, it will be opt-in.
Computers and licenses
When you sign in from the app, it registers the computer with your account so it can receive a license. For each computer we store:
- its name (the computer’s hostname, which you see in your account), the operating system and the app version;
- a machine identifier: a one-way hash of your system’s machine ID, salted so it can’t be matched with other apps. The license is bound to it;
- when it was added, when it last renewed its license, and when it was signed out.
The app renews its license with steerglass.com every few hours. This keeps the number of computers per account within the limit and lets you sign a computer out remotely.
What the app does not send
Steerglass reads your kubeconfig and connects directly from your computer to your Kubernetes clusters. Your kubeconfig, tokens and certificates, cluster names and addresses, resources, logs, secrets and terminal sessions are never sent to us. The app has no telemetry and no crash reporting.
Besides the license renewals above, the app only contacts steerglass.com to check for updates (it downloads a small file with the latest version number) and to download them.
Website analytics
We use Umami, self-hosted on our server, to count visits and see what works on the website: pages viewed (without query strings), referring site, browser, operating system, device type, screen size, language and approximate location (country, region, city) derived from your IP address. We also count a few actions, such as which installer is downloaded or when a sign-in link is requested.
Umami sets no cookies and stores no IP addresses. Visits are grouped with an identifier computed from your IP address and browser with a salt that changes every month, so you can’t be followed over time or across sites, and we can’t tell who you are. These statistics are not shared with anyone. Analytics don’t run on our administration pages.
Server logs and security
Like every web server, ours records technical data for each request — IP address, date and time, the page or file requested, browser user agent, and response status — to keep the service running and secure and to prevent abuse (for example, too many sign-in attempts). These logs are rotated automatically and kept for a few weeks at most.
Support requests and feedback
When you write to us from your account (Support & feedback), we store the request — its type, subject and messages — together with your account, and, when you start it from the app, the app version and operating system. We use it to answer you and to improve Steerglass. Your messages are read by the people who build Steerglass, and we email you when we answer.
Emails you send us
If you write to us by email, we keep the conversation to answer you and for as long as it’s useful for support.
Legal bases
- Contract (Art. 6(1)(b) GDPR): your account, sign-in, computers and licenses, support requests, and account-related emails — needed to provide the service you asked for.
- Legitimate interests (Art. 6(1)(f) GDPR): security logs and abuse prevention, backups, and anonymous, cookieless website analytics to improve the website. You can object at any time (see Your rights).
Cookies and local storage
We use no advertising or tracking cookies, so there’s no cookie banner. The website uses only:
| Name | What it’s for | Duration |
|---|---|---|
sg_sid (cookie) | Keeps you signed in to your account on steerglass.com. Set only when you sign in. | 30 days, renewed while you use it |
sg-arch (local storage) | Remembers the architecture you picked on the Linux page. | Until you clear it |
Cloudflare, which protects and delivers the website, may set strictly necessary security cookies (for example, to tell people from bots).
Who processes your data
We don’t sell your data or share it with anyone for their own purposes. We rely on these providers, under data processing agreements:
| Provider | What for | Where |
|---|---|---|
| DigitalOcean | The server that runs steerglass.com, the account service and the analytics | Frankfurt, Germany |
| Amazon Web Services | Encrypted backups of the server | Frankfurt, Germany |
| Cloudflare | DNS, protection against attacks and delivery of the website: all traffic to steerglass.com passes through it | Global network |
| Brevo | Sending sign-in emails | European Union |
DigitalOcean, Amazon and Cloudflare are US companies. Where data may be accessed from outside the European Economic Area, transfers are covered by the EU–US Data Privacy Framework, to which they are certified, and by the European Commission’s Standard Contractual Clauses.
How long we keep it
- Account, computers and support requests: as long as you have an account. When you delete it, they’re removed right away and disappear from backups within 6 months as old backups expire.
- Sign-in links and pending app sign-ins: deleted a day after they expire. Sessions: deleted when they expire.
- Server logs: a few weeks at most. Analytics: kept as anonymous statistics.
Your rights
Under the GDPR you can ask to access your data, get a copy in a portable format, correct it, delete it (and your account), restrict its processing, and object to processing based on legitimate interests. Write to [email protected] from the email address of your account; we’ll answer within one month.
You can also do it yourself at any time from your account: see and sign out your computers, and delete your account (under Account → Delete account). Steerglass then signs out on your computers at their next license renewal, within a day.
If you think we handle your data unlawfully, you can lodge a complaint with a supervisory authority — in Italy the Garante per la protezione dei dati personali, or the authority where you live or work.
Children
Steerglass is a professional tool and isn’t meant for children under 16. We don’t knowingly collect their data.
Changes
The open beta is free. When paid plans start, a payment provider will process billing data, and we’ll update this policy before that happens. We’ll post any change here with a new date and, for significant changes, tell you by email.